Data, privacy and retention.
The BLACK& public data position defines purpose, access, retention review, rights handling and the boundary between public, internal, confidential and Board information.
Record status
Owner: Data Protection Officer — Bruno Mihailescu. Version: 1.0. Public status: policy summary. Last reviewed: 15 July 2026.
Purpose and access
Personal and confidential information is handled for a defined operational, legal, security or governance purpose. Access is limited by role, authorization and legitimate need within the relevant system.
Retention
Retention depends on purpose, legal duty, security requirement and the relevant record category. BLACK& does not publish a universal retention period where a verified category schedule has not been approved. Records are reviewed for deletion, anonymization, archival or legal hold according to the applicable schedule.
Rights and contact
Privacy and data-rights requests may be sent to hq@blackandi.com and addressed to the Data Protection Officer. Identity verification may be required before protected information is disclosed or changed.
Data residency
Data residency depends on the approved provider and service configuration. System-specific residency is published only after provider, region, transfer mechanism and scope have been verified.